CVE catalog
CVE-2024-21626
runc: CVE-2024-21626
- Severity
- High · CVSS 8.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 18.92% · Oct 25, 2026
runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc exec) to have a working directory in the host filesystem namespace, allowing for a container escape by giving access to the host filesystem ("attack 2"). The same attack could be used by a malicious image to allow a container process to gain access to the host filesystem through runc run ("attack 1"). Variants of attacks 1 and 2 could be also be used to overwrite semi-arbitrary host binaries, allowing for complete container escapes ("attack 3a" and "attack 3b"). runc 1.1.12 includes patches for this issue.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | runc | sid | 1.3.6+ds1-1 | fixed |
| Debian | runc | forky | 1.3.6+ds1-1 | fixed |
| Debian | runc | trixie | 1.1.15+ds1-2 | fixed |
| Debian | runc | bookworm | 1.1.5+ds1-1+deb12u1 | fixed |
| Debian | runc | bookworm-security | 1.1.5+ds1-1+deb12u1 | fixed |
| Cpe | runc | Not reported | 1.1.12 | fixed |
| Cpe | fedora | Not reported | Not reported | unknown |
| Ubuntu | runc | pro | 1.0.0~rc2+docker1.13.1-0ubuntu1 | vulnerable |
| Ubuntu | runc | pro | 1.0.0~rc4+dfsg1-2 | vulnerable |
| Ubuntu | runc | pro | 1.0.0~rc4+dfsg1-6 | vulnerable |
| Ubuntu | runc | pro | 1.0.0~rc4+dfsg1-6ubuntu0.18.04.1 | vulnerable |
| Ubuntu | runc | pro | 1.0.0~rc7+git20190403.029124da-0ubuntu1~18.04.1 | vulnerable |
| Ubuntu | runc | pro | 1.0.0~rc7+git20190403.029124da-0ubuntu1~18.04.2 | vulnerable |
| Ubuntu | runc | pro | 1.0.0~rc7+git20190403.029124da-0ubuntu1~18.04.2+esm1 | vulnerable |
| Ubuntu | runc | pro | 1.0.0~rc10-0ubuntu1~18.04.1 | vulnerable |
| Ubuntu | runc | pro | 1.0.0~rc10-0ubuntu1~18.04.2 | vulnerable |
| Ubuntu | runc | pro | 1.0.0~rc93-0ubuntu1~18.04.1 | vulnerable |
| Ubuntu | runc | pro | 1.0.0~rc93-0ubuntu1~18.04.2 | vulnerable |
| Ubuntu | runc | pro | 1.0.0~rc95-0ubuntu1~18.04.1 | vulnerable |
| Ubuntu | runc | pro | 1.0.0~rc95-0ubuntu1~18.04.2 | vulnerable |
| Ubuntu | runc | pro | 1.0.1-0ubuntu2~18.04.1 | vulnerable |
| Ubuntu | runc | pro | 1.1.0-0ubuntu1~18.04.1 | vulnerable |
| Ubuntu | runc | pro | 1.1.4-0ubuntu1~18.04.1 | vulnerable |
| Ubuntu | runc | pro | 1.1.4-0ubuntu1~18.04.2 | vulnerable |
| Ubuntu | runc | pro | 1.1.4-0ubuntu1~18.04.2+esm1 | fixed |
| Ubuntu | runc | 20.04 | 1.0.0~rc8+git20190923.3e425f80-0ubuntu1 | vulnerable |
| Ubuntu | runc | 20.04 | 1.0.0~rc10-0ubuntu1 | vulnerable |
| Ubuntu | runc | 20.04 | 1.0.0~rc93-0ubuntu1~20.04.1 | vulnerable |
| Ubuntu | runc | 20.04 | 1.0.0~rc93-0ubuntu1~20.04.2 | vulnerable |
| Ubuntu | runc | 20.04 | 1.0.0~rc95-0ubuntu1~20.04.1 | vulnerable |
| Ubuntu | runc | 20.04 | 1.0.0~rc95-0ubuntu1~20.04.2 | vulnerable |
| Ubuntu | runc | 20.04 | 1.0.1-0ubuntu2~20.04.1 | vulnerable |
| Ubuntu | runc | 20.04 | 1.1.0-0ubuntu1~20.04.1 | vulnerable |
| Ubuntu | runc | 20.04 | 1.1.0-0ubuntu1~20.04.2 | vulnerable |
| Ubuntu | runc | 20.04 | 1.1.4-0ubuntu1~20.04.1 | vulnerable |
| Ubuntu | runc | 20.04 | 1.1.4-0ubuntu1~20.04.2 | vulnerable |
| Ubuntu | runc | 20.04 | 1.1.4-0ubuntu1~20.04.3 | vulnerable |
| Ubuntu | runc | 20.04 | 1.1.7-0ubuntu1~20.04.1 | vulnerable |
| Ubuntu | runc | 20.04 | 1.1.7-0ubuntu1~20.04.2 | fixed |
| Ubuntu | runc | 22.04 | 1.0.1-0ubuntu2 | vulnerable |
| Ubuntu | runc | 22.04 | 1.0.1-0ubuntu3 | vulnerable |
| Ubuntu | runc | 22.04 | 1.0.3-0ubuntu1 | vulnerable |
| Ubuntu | runc | 22.04 | 1.1.0-0ubuntu1 | vulnerable |
| Ubuntu | runc | 22.04 | 1.1.0-0ubuntu1.1 | vulnerable |
| Ubuntu | runc | 22.04 | 1.1.4-0ubuntu1~22.04.1 | vulnerable |
| Ubuntu | runc | 22.04 | 1.1.4-0ubuntu1~22.04.2 | vulnerable |
| Ubuntu | runc | 22.04 | 1.1.4-0ubuntu1~22.04.3 | vulnerable |
| Ubuntu | runc | 22.04 | 1.1.7-0ubuntu1~22.04.1 | vulnerable |
| Ubuntu | runc | 22.04 | 1.1.7-0ubuntu1~22.04.2 | fixed |
| Ubuntu | runc | pro | 1.0.0~rc2+docker1.13.1-0ubuntu1 | vulnerable |
| Ubuntu | runc | pro | 1.0.0~rc4+dfsg1-2 | vulnerable |
| Ubuntu | runc | pro | 1.0.0~rc4+dfsg1-6 | vulnerable |
| Ubuntu | runc | pro | 1.0.0~rc4+dfsg1-6ubuntu0.18.04.1 | vulnerable |
| Ubuntu | runc | pro | 1.0.0~rc7+git20190403.029124da-0ubuntu1~18.04.1 | vulnerable |
| Ubuntu | runc | pro | 1.0.0~rc7+git20190403.029124da-0ubuntu1~18.04.2 | vulnerable |
| Ubuntu | runc | pro | 1.0.0~rc7+git20190403.029124da-0ubuntu1~18.04.2+esm1 | vulnerable |
| Ubuntu | runc | pro | 1.0.0~rc10-0ubuntu1~18.04.1 | vulnerable |
| Ubuntu | runc | pro | 1.0.0~rc10-0ubuntu1~18.04.2 | vulnerable |
| Ubuntu | runc | pro | 1.0.0~rc93-0ubuntu1~18.04.1 | vulnerable |
| Ubuntu | runc | pro | 1.0.0~rc93-0ubuntu1~18.04.2 | vulnerable |
| Ubuntu | runc | pro | 1.0.0~rc95-0ubuntu1~18.04.1 | vulnerable |
| Ubuntu | runc | pro | 1.0.0~rc95-0ubuntu1~18.04.2 | vulnerable |
| Ubuntu | runc | pro | 1.0.1-0ubuntu2~18.04.1 | vulnerable |
| Ubuntu | runc | pro | 1.1.0-0ubuntu1~18.04.1 | vulnerable |
| Ubuntu | runc | pro | 1.1.4-0ubuntu1~18.04.1 | vulnerable |
| Ubuntu | runc | pro | 1.1.4-0ubuntu1~18.04.2 | vulnerable |
| Ubuntu | runc | pro | 1.1.4-0ubuntu1~18.04.2+esm1 | fixed |
| Ubuntu | runc | 20.04 | 1.0.0~rc8+git20190923.3e425f80-0ubuntu1 | vulnerable |
| Ubuntu | runc | 20.04 | 1.0.0~rc10-0ubuntu1 | vulnerable |
| Ubuntu | runc | 20.04 | 1.0.0~rc93-0ubuntu1~20.04.1 | vulnerable |
| Ubuntu | runc | 20.04 | 1.0.0~rc93-0ubuntu1~20.04.2 | vulnerable |
| Ubuntu | runc | 20.04 | 1.0.0~rc95-0ubuntu1~20.04.1 | vulnerable |
| Ubuntu | runc | 20.04 | 1.0.0~rc95-0ubuntu1~20.04.2 | vulnerable |
| Ubuntu | runc | 20.04 | 1.0.1-0ubuntu2~20.04.1 | vulnerable |
| Ubuntu | runc | 20.04 | 1.1.0-0ubuntu1~20.04.1 | vulnerable |
| Ubuntu | runc | 20.04 | 1.1.0-0ubuntu1~20.04.2 | vulnerable |
| Ubuntu | runc | 20.04 | 1.1.4-0ubuntu1~20.04.1 | vulnerable |
| Ubuntu | runc | 20.04 | 1.1.4-0ubuntu1~20.04.2 | vulnerable |
| Ubuntu | runc | 20.04 | 1.1.4-0ubuntu1~20.04.3 | vulnerable |
| Ubuntu | runc | 20.04 | 1.1.7-0ubuntu1~20.04.1 | vulnerable |
| Ubuntu | runc | 20.04 | 1.1.7-0ubuntu1~20.04.2 | fixed |
| Ubuntu | runc | 22.04 | 1.0.1-0ubuntu2 | vulnerable |
| Ubuntu | runc | 22.04 | 1.0.1-0ubuntu3 | vulnerable |
| Ubuntu | runc | 22.04 | 1.0.3-0ubuntu1 | vulnerable |
| Ubuntu | runc | 22.04 | 1.1.0-0ubuntu1 | vulnerable |
| Ubuntu | runc | 22.04 | 1.1.0-0ubuntu1.1 | vulnerable |
| Ubuntu | runc | 22.04 | 1.1.4-0ubuntu1~22.04.1 | vulnerable |
| Ubuntu | runc | 22.04 | 1.1.4-0ubuntu1~22.04.2 | vulnerable |
| Ubuntu | runc | 22.04 | 1.1.4-0ubuntu1~22.04.3 | vulnerable |
| Ubuntu | runc | 22.04 | 1.1.7-0ubuntu1~22.04.1 | vulnerable |
| Ubuntu | runc | 22.04 | 1.1.7-0ubuntu1~22.04.2 | fixed |
| Suse | runc | linux enterprise micro 5.3 | 1.1.11-150000.58.1 | fixed |
| Suse | runc | linux enterprise micro 5.4 | 1.1.11-150000.58.1 | fixed |
| Suse | runc | linux enterprise micro 5.5 | 1.1.11-150000.58.1 | fixed |
| Suse | runc | linux enterprise module for containers 15 sp4 | 1.1.11-150000.58.1 | fixed |
| Suse | runc | linux enterprise module for containers 15 sp5 | 1.1.11-150000.58.1 | fixed |
| Suse | runc | linux enterprise high performance computing 15 sp1-ltss | 1.1.11-150000.58.1 | fixed |
| Suse | runc | linux enterprise high performance computing 15 sp2-ltss | 1.1.11-150000.58.1 | fixed |
| Suse | runc | linux enterprise high performance computing 15 sp3-ltss | 1.1.11-150000.58.1 | fixed |
| Suse | runc | linux enterprise high performance computing 15 sp4-espos | 1.1.11-150000.58.1 | fixed |
| Suse | runc | linux enterprise high performance computing 15 sp4-ltss | 1.1.11-150000.58.1 | fixed |
| Suse | runc | linux enterprise server 15 sp1-ltss | 1.1.11-150000.58.1 | fixed |
| Suse | runc | linux enterprise server 15 sp2-ltss | 1.1.11-150000.58.1 | fixed |
| Suse | runc | linux enterprise server 15 sp3-ltss | 1.1.11-150000.58.1 | fixed |
| Suse | runc | linux enterprise server 15 sp4-ltss | 1.1.11-150000.58.1 | fixed |
| Suse | runc | linux enterprise server for sap applications 15 sp1 | 1.1.11-150000.58.1 | fixed |
| Suse | runc | linux enterprise server for sap applications 15 sp2 | 1.1.11-150000.58.1 | fixed |
| Suse | runc | linux enterprise server for sap applications 15 sp3 | 1.1.11-150000.58.1 | fixed |
| Suse | runc | linux enterprise server for sap applications 15 sp4 | 1.1.11-150000.58.1 | fixed |
| Suse | runc | linux enterprise micro 5.1 | 1.1.11-150000.58.1 | fixed |
| Suse | runc | linux enterprise micro 5.2 | 1.1.11-150000.58.1 | fixed |
| Suse | runc | enterprise storage 7.1 | 1.1.11-150000.58.1 | fixed |
| Opensuse | runc | leap micro 5.3 | 1.1.11-150000.58.1 | fixed |
| Opensuse | runc | leap micro 5.4 | 1.1.11-150000.58.1 | fixed |
| Opensuse | runc | leap 15.5 | 1.1.11-150000.58.1 | fixed |
| Suse | runc | linux enterprise micro 5.3 | 1.1.12-150000.61.2 | fixed |
| Suse | runc | linux enterprise micro 5.4 | 1.1.12-150000.61.2 | fixed |
| Suse | runc | linux enterprise micro 5.5 | 1.1.12-150000.61.2 | fixed |
| Suse | runc | linux enterprise module for containers 15 sp4 | 1.1.12-150000.61.2 | fixed |
| Suse | runc | linux enterprise module for containers 15 sp5 | 1.1.12-150000.61.2 | fixed |
| Suse | runc | linux enterprise high performance computing 15 sp2-ltss | 1.1.12-150000.61.2 | fixed |
| Suse | runc | linux enterprise high performance computing 15 sp3-ltss | 1.1.12-150000.61.2 | fixed |
| Suse | runc | linux enterprise high performance computing 15 sp4-espos | 1.1.12-150000.61.2 | fixed |
| Suse | runc | linux enterprise high performance computing 15 sp4-ltss | 1.1.12-150000.61.2 | fixed |
| Suse | runc | linux enterprise server 15 sp2-ltss | 1.1.12-150000.61.2 | fixed |
| Suse | runc | linux enterprise server 15 sp3-ltss | 1.1.12-150000.61.2 | fixed |
| Suse | runc | linux enterprise server 15 sp4-ltss | 1.1.12-150000.61.2 | fixed |
| Suse | runc | linux enterprise server for sap applications 15 sp2 | 1.1.12-150000.61.2 | fixed |
| Suse | runc | linux enterprise server for sap applications 15 sp3 | 1.1.12-150000.61.2 | fixed |
| Suse | runc | linux enterprise server for sap applications 15 sp4 | 1.1.12-150000.61.2 | fixed |
| Suse | runc | linux enterprise micro 5.1 | 1.1.12-150000.61.2 | fixed |
| Suse | runc | linux enterprise micro 5.2 | 1.1.12-150000.61.2 | fixed |
| Suse | runc | enterprise storage 7.1 | 1.1.12-150000.61.2 | fixed |
| Opensuse | runc | leap micro 5.3 | 1.1.12-150000.61.2 | fixed |
| Opensuse | runc | leap micro 5.4 | 1.1.12-150000.61.2 | fixed |
| Opensuse | runc | leap 15.5 | 1.1.12-150000.61.2 | fixed |
| Suse | runc | linux enterprise module for containers 12 | 1.1.12-16.46.1 | fixed |
| Opensuse | crun | tumbleweed | 1.14.4-1.1 | fixed |
| Suse | crun | package hub 15 sp6 | 1.20-bp156.2.3.1 | fixed |
| Opensuse | crun | leap 15.6 | 1.20-bp156.2.3.1 | fixed |
| Suse | runc | linux enterprise module for containers 12 | 1.1.11-16.43.1 | fixed |
| Opensuse | runc | tumbleweed | 1.1.12-1.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | runc | source | sid | 1.1.12+ds1-1 | not yet assigned | Not reported | [1062532] |
| Debian | runc | source | forky | 1.1.12+ds1-1 | not yet assigned | Not reported | [1062532] |
| Debian | runc | source | trixie | 1.1.12+ds1-1 | not yet assigned | Not reported | [1062532] |
| Debian | runc | source | bookworm | 1.1.5+ds1-1+deb12u1 | not yet assigned | Not reported | [1062532] |
| Cpe | runc | cpe | Not reported | 1.1.12 | Not reported | NVD-CVE-2024-21626 | Not reported |
| Ubuntu | runc | deb | pro | 1.1.4-0ubuntu1~18.04.2+esm1 | Not reported | USN-6619-1 | Not reported |
| Ubuntu | runc | deb | 20.04 | 1.1.7-0ubuntu1~20.04.2 | Not reported | USN-6619-1 | Not reported |
| Ubuntu | runc | deb | 22.04 | 1.1.7-0ubuntu1~22.04.2 | Not reported | USN-6619-1 | Not reported |
| Ubuntu | runc | deb | pro | 1.1.4-0ubuntu1~18.04.2+esm1 | Not reported | UBUNTU-CVE-2024-21626 | Not reported |
| Ubuntu | runc | deb | 20.04 | 1.1.7-0ubuntu1~20.04.2 | Not reported | UBUNTU-CVE-2024-21626 | Not reported |
| Ubuntu | runc | deb | 22.04 | 1.1.7-0ubuntu1~22.04.2 | Not reported | UBUNTU-CVE-2024-21626 | Not reported |
| Suse | runc | rpm | linux enterprise micro 5.3 | 1.1.11-150000.58.1 | Not reported | SUSE-SU-2024:0295-1 | Not reported |
| Suse | runc | rpm | linux enterprise micro 5.4 | 1.1.11-150000.58.1 | Not reported | SUSE-SU-2024:0295-1 | Not reported |
| Suse | runc | rpm | linux enterprise micro 5.5 | 1.1.11-150000.58.1 | Not reported | SUSE-SU-2024:0295-1 | Not reported |
| Suse | runc | rpm | linux enterprise module for containers 15 sp4 | 1.1.11-150000.58.1 | Not reported | SUSE-SU-2024:0295-1 | Not reported |
| Suse | runc | rpm | linux enterprise module for containers 15 sp5 | 1.1.11-150000.58.1 | Not reported | SUSE-SU-2024:0295-1 | Not reported |
| Suse | runc | rpm | linux enterprise high performance computing 15 sp1-ltss | 1.1.11-150000.58.1 | Not reported | SUSE-SU-2024:0295-1 | Not reported |
| Suse | runc | rpm | linux enterprise high performance computing 15 sp2-ltss | 1.1.11-150000.58.1 | Not reported | SUSE-SU-2024:0295-1 | Not reported |
| Suse | runc | rpm | linux enterprise high performance computing 15 sp3-ltss | 1.1.11-150000.58.1 | Not reported | SUSE-SU-2024:0295-1 | Not reported |
| Suse | runc | rpm | linux enterprise high performance computing 15 sp4-espos | 1.1.11-150000.58.1 | Not reported | SUSE-SU-2024:0295-1 | Not reported |
| Suse | runc | rpm | linux enterprise high performance computing 15 sp4-ltss | 1.1.11-150000.58.1 | Not reported | SUSE-SU-2024:0295-1 | Not reported |
| Suse | runc | rpm | linux enterprise server 15 sp1-ltss | 1.1.11-150000.58.1 | Not reported | SUSE-SU-2024:0295-1 | Not reported |
| Suse | runc | rpm | linux enterprise server 15 sp2-ltss | 1.1.11-150000.58.1 | Not reported | SUSE-SU-2024:0295-1 | Not reported |
| Suse | runc | rpm | linux enterprise server 15 sp3-ltss | 1.1.11-150000.58.1 | Not reported | SUSE-SU-2024:0295-1 | Not reported |
| Suse | runc | rpm | linux enterprise server 15 sp4-ltss | 1.1.11-150000.58.1 | Not reported | SUSE-SU-2024:0295-1 | Not reported |
| Suse | runc | rpm | linux enterprise server for sap applications 15 sp1 | 1.1.11-150000.58.1 | Not reported | SUSE-SU-2024:0295-1 | Not reported |
| Suse | runc | rpm | linux enterprise server for sap applications 15 sp2 | 1.1.11-150000.58.1 | Not reported | SUSE-SU-2024:0295-1 | Not reported |
| Suse | runc | rpm | linux enterprise server for sap applications 15 sp3 | 1.1.11-150000.58.1 | Not reported | SUSE-SU-2024:0295-1 | Not reported |
| Suse | runc | rpm | linux enterprise server for sap applications 15 sp4 | 1.1.11-150000.58.1 | Not reported | SUSE-SU-2024:0295-1 | Not reported |
| Suse | runc | rpm | linux enterprise micro 5.1 | 1.1.11-150000.58.1 | Not reported | SUSE-SU-2024:0295-1 | Not reported |
| Suse | runc | rpm | linux enterprise micro 5.2 | 1.1.11-150000.58.1 | Not reported | SUSE-SU-2024:0295-1 | Not reported |
| Suse | runc | rpm | enterprise storage 7.1 | 1.1.11-150000.58.1 | Not reported | SUSE-SU-2024:0295-1 | Not reported |
| Opensuse | runc | rpm | leap micro 5.3 | 1.1.11-150000.58.1 | Not reported | SUSE-SU-2024:0295-1 | Not reported |
| Opensuse | runc | rpm | leap micro 5.4 | 1.1.11-150000.58.1 | Not reported | SUSE-SU-2024:0295-1 | Not reported |
| Opensuse | runc | rpm | leap 15.5 | 1.1.11-150000.58.1 | Not reported | SUSE-SU-2024:0295-1 | Not reported |
| Suse | runc | rpm | linux enterprise micro 5.3 | 1.1.12-150000.61.2 | Not reported | SUSE-SU-2024:0459-1 | Not reported |
| Suse | runc | rpm | linux enterprise micro 5.4 | 1.1.12-150000.61.2 | Not reported | SUSE-SU-2024:0459-1 | Not reported |
| Suse | runc | rpm | linux enterprise micro 5.5 | 1.1.12-150000.61.2 | Not reported | SUSE-SU-2024:0459-1 | Not reported |
| Suse | runc | rpm | linux enterprise module for containers 15 sp4 | 1.1.12-150000.61.2 | Not reported | SUSE-SU-2024:0459-1 | Not reported |
| Suse | runc | rpm | linux enterprise module for containers 15 sp5 | 1.1.12-150000.61.2 | Not reported | SUSE-SU-2024:0459-1 | Not reported |
| Suse | runc | rpm | linux enterprise high performance computing 15 sp2-ltss | 1.1.12-150000.61.2 | Not reported | SUSE-SU-2024:0459-1 | Not reported |
| Suse | runc | rpm | linux enterprise high performance computing 15 sp3-ltss | 1.1.12-150000.61.2 | Not reported | SUSE-SU-2024:0459-1 | Not reported |
| Suse | runc | rpm | linux enterprise high performance computing 15 sp4-espos | 1.1.12-150000.61.2 | Not reported | SUSE-SU-2024:0459-1 | Not reported |
| Suse | runc | rpm | linux enterprise high performance computing 15 sp4-ltss | 1.1.12-150000.61.2 | Not reported | SUSE-SU-2024:0459-1 | Not reported |
| Suse | runc | rpm | linux enterprise server 15 sp2-ltss | 1.1.12-150000.61.2 | Not reported | SUSE-SU-2024:0459-1 | Not reported |
| Suse | runc | rpm | linux enterprise server 15 sp3-ltss | 1.1.12-150000.61.2 | Not reported | SUSE-SU-2024:0459-1 | Not reported |
| Suse | runc | rpm | linux enterprise server 15 sp4-ltss | 1.1.12-150000.61.2 | Not reported | SUSE-SU-2024:0459-1 | Not reported |
| Suse | runc | rpm | linux enterprise server for sap applications 15 sp2 | 1.1.12-150000.61.2 | Not reported | SUSE-SU-2024:0459-1 | Not reported |
| Suse | runc | rpm | linux enterprise server for sap applications 15 sp3 | 1.1.12-150000.61.2 | Not reported | SUSE-SU-2024:0459-1 | Not reported |
| Suse | runc | rpm | linux enterprise server for sap applications 15 sp4 | 1.1.12-150000.61.2 | Not reported | SUSE-SU-2024:0459-1 | Not reported |
| Suse | runc | rpm | linux enterprise micro 5.1 | 1.1.12-150000.61.2 | Not reported | SUSE-SU-2024:0459-1 | Not reported |
| Suse | runc | rpm | linux enterprise micro 5.2 | 1.1.12-150000.61.2 | Not reported | SUSE-SU-2024:0459-1 | Not reported |
| Suse | runc | rpm | enterprise storage 7.1 | 1.1.12-150000.61.2 | Not reported | SUSE-SU-2024:0459-1 | Not reported |
| Opensuse | runc | rpm | leap micro 5.3 | 1.1.12-150000.61.2 | Not reported | SUSE-SU-2024:0459-1 | Not reported |
| Opensuse | runc | rpm | leap micro 5.4 | 1.1.12-150000.61.2 | Not reported | SUSE-SU-2024:0459-1 | Not reported |
| Opensuse | runc | rpm | leap 15.5 | 1.1.12-150000.61.2 | Not reported | SUSE-SU-2024:0459-1 | Not reported |
| Suse | runc | rpm | linux enterprise module for containers 12 | 1.1.12-16.46.1 | Not reported | SUSE-SU-2024:0328-1 | Not reported |
| Opensuse | crun | rpm | tumbleweed | 1.14.4-1.1 | Not reported | OPENSUSE-SU-2024:13754-1 | Not reported |
| Suse | crun | rpm | package hub 15 sp6 | 1.20-bp156.2.3.1 | Not reported | OPENSUSE-SU-2025:0074-1 | Not reported |
| Opensuse | crun | rpm | leap 15.6 | 1.20-bp156.2.3.1 | Not reported | OPENSUSE-SU-2025:0074-1 | Not reported |
| Suse | runc | rpm | linux enterprise module for containers 12 | 1.1.11-16.43.1 | Not reported | SUSE-SU-2024:0294-1 | Not reported |
| Opensuse | runc | rpm | tumbleweed | 1.1.12-1.1 | Not reported | OPENSUSE-SU-2024:13644-1 | Not reported |
OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
References
- [https://ftp.suse.com/pub/projects/security/csaf/essa-2024_0027.json]
- [https://nvd.nist.gov/vuln/detail/CVE-2024-21626]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2024-21626]
- [https://osv.dev/vulnerability/DSA-5615-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:0294-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:0295-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:0328-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:0459-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2024-21626]
- [https://osv.dev/vulnerability/USN-6619-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:13644-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:13754-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2025:0074-1]
- [https://security-tracker.debian.org/tracker/CVE-2024-21626]
- [https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-21626.json]
- [https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0794.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]